Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
File:                     MEEPXtOG-HkgPLRCil-V_ciZtZE.mft (raw, json)
Hash identifier:          vAAaCdWliq/1aI1x/MOLZJSo54wThgXN6DYdj5aN9R8=
Subject key identifier:   6E:E7:1E:2D:16:E0:34:E4:3C:F3:F3:69:E3:16:5F:E5:D7:B3:52:89
Authority key identifier: 30:41:0F:5E:D3:86:F8:79:20:3C:B4:42:8A:5F:95:FD:C8:99:B5:91
Certificate issuer:       /CN=30410f5ed386f879203cb4428a5f95fdc899b591
Certificate serial:       01962E99DFF6A6F33E2593E66F575F12366C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
Manifest number:          04A7
Signing time:             Sun 13 Apr 2025 10:02:38 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:38 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:38 +0000
Files and hashes:         1: MEEPXtOG-HkgPLRCil-V_ciZtZE.crl (hash: 7KEqk0e2ab05klMrIB2XTG1MQyRjp9mz0/e3g3t6LtU=)
                          2: VKnNvbVsRqF6coqOLVNx3je3CD4.roa (hash: SfCYWwwunVdh83nhVwYfX1uU9K1UYabADUPAPwp/I2c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:df:f6:a6:f3:3e:25:93:e6:6f:57:5f:12:36:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30410f5ed386f879203cb4428a5f95fdc899b591
        Validity
            Not Before: Apr 13 10:02:38 2025 GMT
            Not After : Apr 14 10:02:38 2025 GMT
        Subject: CN=6ee71e2d16e034e43cf3f369e3165fe5d7b35289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:66:f9:a4:92:12:67:bf:9e:dd:e9:ef:17:b3:
                    36:86:e2:ce:56:74:e5:7b:c0:f3:26:0e:34:a4:85:
                    ee:84:bb:36:fe:6c:55:e0:1f:3e:6c:0c:38:c3:19:
                    62:03:b5:a5:fd:ab:83:4e:77:4f:eb:39:5f:9d:85:
                    3c:30:de:0d:1e:ae:2a:af:5b:75:46:5d:f2:fe:e6:
                    47:05:de:3a:25:40:a7:81:ff:f3:90:a0:63:8f:9f:
                    8c:48:34:60:48:bb:51:c0:42:47:82:0e:eb:52:0c:
                    7c:92:01:fd:7d:9f:57:e6:bb:f1:9f:b0:40:52:cb:
                    ce:63:e6:a5:a2:6a:2d:b1:49:51:d4:32:1e:a2:19:
                    2d:29:26:21:ff:ac:b6:1c:32:9f:e0:d6:dc:24:3b:
                    fa:53:03:fd:98:22:c9:46:29:01:a9:f1:7c:88:30:
                    7b:4a:12:c0:19:a9:0d:66:85:2b:c8:de:c7:9b:c4:
                    b9:78:ed:d1:e8:90:56:0e:9f:48:13:c1:63:ac:60:
                    91:a3:e2:4e:32:ef:28:3a:27:54:02:a4:64:81:73:
                    b5:1f:25:35:f3:67:8c:da:dd:31:2b:cb:4c:27:39:
                    60:de:fd:17:af:c5:6f:dc:16:38:af:94:0a:e3:db:
                    85:db:f3:1a:b2:cb:0f:0a:d9:28:c0:0b:50:ea:b4:
                    0d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E7:1E:2D:16:E0:34:E4:3C:F3:F3:69:E3:16:5F:E5:D7:B3:52:89
            X509v3 Authority Key Identifier:
                keyid:30:41:0F:5E:D3:86:F8:79:20:3C:B4:42:8A:5F:95:FD:C8:99:B5:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:07:14:49:af:bb:1e:47:e4:55:29:77:69:d1:2e:80:9a:9d:
         80:2b:b4:f3:5c:be:a6:2d:cc:35:20:97:8d:70:57:15:15:5a:
         3d:93:ea:9c:01:8a:68:17:d2:be:8a:94:1d:d5:62:0c:4e:b6:
         7b:76:5c:ff:4e:56:78:a5:5c:61:bd:72:fd:65:ec:a1:0c:d6:
         fb:c7:3d:28:45:74:f4:f4:5c:87:1f:70:89:ab:61:a9:21:95:
         5b:e8:99:a5:b7:27:d5:61:20:5e:c1:b1:a0:45:13:3a:64:fb:
         67:8b:58:08:10:07:c0:31:47:d4:3c:10:dd:d3:54:e2:85:f1:
         cc:ed:75:34:32:d0:ec:f5:42:0c:96:53:b7:d6:fc:24:2f:2e:
         11:22:6d:b6:8e:d9:44:92:84:d6:21:e1:fd:9b:c4:22:63:4e:
         4a:43:c7:3f:c8:fd:a8:c2:59:03:a1:d7:0e:62:77:72:9f:2d:
         15:26:1c:c3:e4:8d:45:5a:ef:e7:c7:4c:5b:89:1f:6d:16:77:
         fe:25:01:3f:28:b9:fa:2c:c2:90:4e:df:19:4b:fb:1a:12:c8:
         d1:d2:cc:ce:03:d0:bc:2a:b4:0e:0f:22:2a:4a:12:72:ea:bc:
         60:4c:b5:6c:47:65:bc:e4:6c:a6:25:08:8a:ed:21:74:19:e8:
         9f:6a:83:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----